ColdfrontHow to use a OneKey on Hyperliquid without connecting it every time
Authorize a Hyperliquid API wallet with your OneKey once, then store that API key in Coldfront, a free Chrome extension. Coldfront gives the API key to the official Hyperliquid app while it's unlocked, so you trade from your OneKey's account without connecting the OneKey. Withdrawals still need the OneKey.
This works with the OneKey Classic, Pro or Touch, and with any OneKey that can sign for an Ethereum account.
Connect your OneKey to Hyperliquid
Connect the OneKey through the OneKey app and browser extension, or add it to Rabby as a hardware wallet. Then open app.hyperliquid.xyz, press Connect, and pick that browser wallet.
When Hyperliquid asks for a signature, the OneKey shows it on the device. Check it there before you confirm.
Why the OneKey has to be connected in the first place
Hyperliquid runs in the browser, so the OneKey reaches it through a browser wallet. The app asks the OneKey to sign when you enable trading, when you enable trading again in another browser, and when you withdraw or move funds. That keeps your funds safe, but it also means a browser wallet connected to a trading site and the device close by. A connected wallet is also how most Hyperliquid scams start: a fake site, a connect prompt, and one signature.
Trade without connecting the OneKey
- Authorize an API wallet with your OneKey. Open app.hyperliquid.xyz/API with the OneKey connected. Enter a name, press Generate and copy the private key it shows: that's the API key, and it's shown once. Press Authorize and confirm on the OneKey.
- Store the API key in Coldfront. Install Coldfront, paste the API key, and pick a passphrase. Add Touch ID (passkey) if you like. Coldfront shows the API wallet address it worked out from the API key, so you can check it matches the API page.
- Disconnect the OneKey and trade. Disconnect the browser wallet from Hyperliquid and put the OneKey away. Unlock Coldfront, open app.hyperliquid.xyz, and trade as usual. The official app shows your OneKey's account and signs orders with the API key.
Coldfront locks after the time you choose, when your computer goes idle, or when you close the last Hyperliquid tab. Locking reloads every Hyperliquid tab, so the app forgets the API key.
What the OneKey still signs
- Authorizing the API wallet, and renewing it (it lasts up to 180 days).
- Withdrawals.
- Moving funds between accounts.
Before you start
Coldfront is free and works with Hyperliquid accounts that joined with Hyperliquid referral code COLDFRONT, which takes 4% off your trading fees. Hyperliquid accepts a code only before an account's first trade, so if your OneKey account has already traded, add a second account on the OneKey and follow the new account guide.
Questions
Can I use a OneKey on Hyperliquid?
Yes. Connect the OneKey through a browser wallet such as the OneKey extension or Rabby and it controls a normal Hyperliquid account. To trade without connecting it every time, authorize an API wallet with it once and use Coldfront.
Does the OneKey need to be connected while I trade?
Not with Coldfront. The OneKey signs once to authorize an API wallet. After that, Coldfront gives the API key to the official Hyperliquid app while it's unlocked, and the OneKey can stay disconnected until you withdraw or renew the API wallet.
Can Coldfront withdraw from my OneKey's account?
No. The API key Coldfront holds can place, change and cancel orders. Hyperliquid doesn't let an API wallet withdraw, send, transfer or approve other wallets, so those still need your OneKey.
What if I lose my OneKey?
Your Hyperliquid account belongs to the address, not the device. Restore your recovery phrase on a new OneKey (or another wallet) and you have the account back. The API wallet keeps working until it expires or you revoke it, but withdrawals need the restored wallet.